Legacy applications don't just degrade productivity but are quantifiably more expensive to maintain and in the area of cybersecurity, could pose a substantial risk to the business. The escalating retirement of legacy experts should further worry organizations that are not being decisive about modernizing their cybersecurity IT landscape. In this presentation, we'll walk through the lifecycle of a retirement project of a legacy Identity Provider (SiteMinder). SiteMinder does not support for cloud adoption or modern authentication patterns. We'll discuss application discovery, migration patterns and how to resolve blockers while migrating the applications to Ping Access, Entra ID App Proxy or other reverse proxy applications for applications that are not able to modernize.